1. Who We Are

CrowdLoops is a white-label product validation competition platform operated by CrowdLoops. When you use CrowdLoops — whether as an entrant, a voter, or a visitor — we process certain personal data to operate the platform.

For questions about this policy or your data, contact us at contact@crowdloops.com.

2. What Data We Collect and Why

When you submit a competition entry:

• Name and contact email — to administer your entry, contact you if you are shortlisted or win, and verify eligibility.
• Your design submission and inspiration text — to display on the platform and for pre-publication moderation.
• Competition name and submission timestamp — to manage event administration.

When you vote:

• Your authenticated user ID (via Clerk) — to enforce the one-vote-per-person rule.
• Vote timestamp and competition identifier — to count verified votes accurately.
• Device and session signals — used for duplicate detection and vote integrity. This is personal data and is handled accordingly.

When you sign up for notifications:

• Your email address — to send you updates about the competition you expressed interest in. You can unsubscribe at any time.

When you visit the platform:

• Aggregated usage analytics (via Vercel Analytics) — page views and general traffic patterns. No personal profile is built from this data.
• Performance data (via Vercel Speed Insights) — page load metrics used to improve the platform.

3. Legal Basis for Processing

• Contract performance — processing your entry, administering voting, and contacting winners.
• Legitimate interests — fraud and duplicate vote detection, platform security, and improving the service.
• Consent — notification sign-ups and any optional marketing communications. You may withdraw consent at any time.

4. Data Processors We Use

We use the following third-party processors, each bound by a data processing agreement:

• Clerk — user authentication and identity management.
• Vercel — platform hosting, analytics, and speed insights.
• Turso — database storage for entries, votes, and competition data.
• Vercel Blob — image storage for submitted design files.
• Resend — transactional email (entry confirmations, winner notifications).

We do not sell your data to any third party.

5. How Long We Keep Your Data

Entry and vote data is retained for the duration of the competition plus 12 months, unless you request deletion earlier or we are required to retain it by law (for example, for prize payment records).

Notification sign-up emails are retained until you unsubscribe or request deletion.

Analytics data is aggregated and does not identify individuals.

6. Your Rights Under GDPR

If you are based in the EEA or UK, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your data, subject to legal retention obligations.
• Restriction — ask us to restrict processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at contact@crowdloops.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection supervisory authority.

7. International Transfers

Some of our processors (including Vercel and Clerk) operate infrastructure in the United States. Where personal data is transferred outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

8. Children

CrowdLoops competitions are open to persons aged 18 and over, or 16–17 with verifiable parental or guardian consent. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have collected data from a child under 16 without appropriate consent, contact us immediately at contact@crowdloops.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date. For material changes, we will notify active users by email where we hold a valid address.

10. Contact

For any privacy questions, data rights requests, or complaints:

contact@crowdloops.com